load-balancer
Fail
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEMETADATA_POISONING
Full Analysis
- [CREDENTIALS_UNSAFE]: The HAProxy statistics configuration template contains hardcoded default credentials.
- Evidence: The configuration line
stats auth admin:passwordinSKILL.mdprovides a literal, insecure username and password pair for the monitoring interface. - [METADATA_POISONING]: The author field in the skill's YAML frontmatter does not match the identified author context.
- Evidence: The file declares
author: terminal-skillswhereas the authenticated context identifies the author aschaterm. This inconsistency in metadata can be used to obscure the origin of the skill.
Recommendations
- AI detected serious security threats
Audit Metadata